首页 > 解决方案 > cisco ISR 4431. tty 线路的传输输入 ssh

问题描述

在 Cisco 串行/控制台服务器中,为 tty 线路配置“传输输入 ssh”意味着什么?

这是我在 ISR 上的配置:

# show ver
:
:
cisco ISR4431/K9 (1RU) processor with 1796073K/6147K bytes of memory.
Processor board ID FGL23173211
1 Virtual Ethernet interface
8 Gigabit Ethernet interfaces
16 terminal lines
32768K bytes of non-volatile configuration memory.
4194304K bytes of physical memory.
6598655K bytes of flash memory at bootflash:.
0K bytes of WebUI ODM Files at webui:.

Configuration register is 0x2102

vrf definition Mgmt-intf
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family

ip host testserver 2026 10.1.1.1

interface Loopback0
 ip address 10.1.1.1 255.255.255.0

interface GigabitEthernet0
 vrf forwarding Mgmt-intf
 ip address 172.24.136.57 255.255.255.128
 negotiation auto
!
interface Vlan1
 no ip address

ip forward-protocol nd
ip http server
ip http authentication local
ip http secure-server
ip http client source-interface GigabitEthernet0
ip route 172.25.228.4 255.255.255.255 172.24.136.1
ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 172.24.136.1
!
ip ssh time-out 60

menu isr title ^C
##########################################################################                                                                        #
# cisco isr for testing
##########################################################################
^C
menu isr prompt ^C
enter your menu choice
^C
menu isr text 2 console of testserver
menu isr command 2 telnet 10.1.1.1 2026
menu isr text q disconnect from terminal server
menu isr command q exit
menu isr text d disconnect line
menu isr command d disconnect
menu isr text c clear line 26
menu isr command c clear line 26
menu isr text e menu-exit
menu isr command e menu-exit
menu isr clear-screen
menu isr line-mode
!

line con 0
 transport input none
 stopbits 1
line aux 0
 stopbits 1
line 0/2/0 0/2/15
 transport input ssh
 transport output all
line vty 0
 exec-timeout 30 0
 login local
 autocommand  menu isr
 transport input ssh
 transport output telnet

使用“transport input all”,我可以发出“connect testserver”,并且可以通过从 ISR 的第 26 行连接到服务器上的控制台端口的控制台端口访问硬件。使用“传输输入 ssh”,“连接 testserver”表示“连接被拒绝”。这是否意味着 ISR 正在尝试打开与我的测试服务器上某个端口的 TCP 连接?

感谢任何帮助。没有找到太多的文档。

标签: sshconsolettycisco-ios

解决方案


https://www.youtube.com/watch?v=IcCQRrUXdiE
https://www.youtube.com/watch?v=TDZLoLKtUro
https://etherealmind.com/cisco-ios-reverse-ssh-terminal-server-console-access/

这 3 个视频解释了如何让“传输输入 ssh”工作。配置完成后,可以通过 ssh 连接到控制台服务器的特定端口,这将使您进入连接到串行集中器的服务器控制台。


推荐阅读